Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa
File:                     08B1BF36194E11F19D5A7EC83E3D8C67.roa (raw, json)
Hash identifier:          jTZPy/nCH6riVG2Ook8ezgmYAh8vzggi8tmYrO9ZwkE=
Subject key identifier:   C9:84:2C:17:1C:E4:7A:4B:BC:12:13:A9:4A:83:46:F0:88:61:71:BC
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05E9
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa
Signing time:             Fri 06 Mar 2026 11:17:17 +0000
ROA not before:           Fri 06 Mar 2026 11:17:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132912
IP address blocks:        151.158.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar  6 11:17:17 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69aab7bd-2981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:01:71:36:e2:57:d5:35:3c:74:b0:d4:cc:
                    50:cd:c4:1c:5b:22:4e:0e:6a:22:68:16:8d:bf:7b:
                    a9:79:35:7f:f8:96:59:86:ea:90:2f:a6:c6:89:54:
                    5a:df:15:c9:e9:43:72:ae:e7:b1:61:91:45:be:42:
                    1c:92:64:9e:5a:4a:29:53:70:56:22:e9:6c:f5:b7:
                    54:9c:61:0d:b2:c3:fc:b3:02:9f:0a:03:b9:d0:dd:
                    09:b4:b3:c6:80:bc:ff:da:e8:94:6b:b5:75:57:48:
                    6a:32:5f:1e:ce:48:fc:bf:0d:d4:a7:e9:4d:63:c1:
                    94:32:b4:5d:95:d8:9a:21:b1:c9:11:27:95:f1:ef:
                    01:a8:33:05:7c:4c:94:54:c9:bd:35:fd:07:75:18:
                    12:b2:cb:d1:83:09:97:6a:3c:0c:07:92:c4:a7:e7:
                    2a:3d:94:46:3e:30:f8:78:7c:35:91:83:e7:21:82:
                    03:2a:ee:6d:f5:5b:f2:6a:9a:00:74:1d:25:b3:6b:
                    f6:ae:f1:35:a8:2f:d2:3a:e4:2f:fe:a6:bc:91:6d:
                    e7:97:cd:56:3c:3b:81:c9:e4:43:54:76:8d:fa:4a:
                    2c:de:f8:ea:e2:52:93:05:d4:26:1e:9e:08:f3:cc:
                    e5:14:16:8d:12:7b:20:4d:24:25:3c:af:df:14:91:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:84:2C:17:1C:E4:7A:4B:BC:12:13:A9:4A:83:46:F0:88:61:71:BC
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/08B1BF36194E11F19D5A7EC83E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:32:da:06:88:7b:d2:4d:5f:6f:77:56:72:fd:1f:71:6c:da:
         39:d8:99:f5:de:93:68:6b:42:33:71:f3:08:0c:55:e0:8f:f2:
         2b:0c:c1:68:03:4f:fa:ec:f5:6b:c6:d3:db:3d:5a:b7:90:98:
         ce:f9:8b:5c:ef:37:17:d3:69:96:c5:02:4d:2b:fc:de:6e:a0:
         78:6f:f9:11:77:82:5c:b4:91:77:ee:9d:b4:d2:a5:e2:a5:4c:
         6c:92:3f:57:8e:64:01:06:80:c7:93:fa:60:a8:8d:ac:50:f7:
         54:17:2a:d5:51:07:a9:37:98:b0:89:51:8c:fe:28:88:7c:83:
         87:0d:24:b5:e8:bd:b3:00:73:b8:28:f3:0f:7e:1d:2e:75:56:
         2c:10:ad:03:95:7d:2d:31:3c:87:4e:01:e8:7c:b6:1e:af:0c:
         8e:88:43:a0:c0:2b:3d:c2:d1:93:4f:2c:17:86:38:43:ec:b8:
         f6:8b:27:64:87:02:19:68:45:4f:f2:c5:66:e2:9e:e7:6a:9c:
         f2:1c:ae:8b:56:48:03:00:bb:1c:8f:af:30:16:88:da:55:29:
         33:5c:97:ce:9e:7e:c6:e2:4f:5e:93:5d:33:c0:1c:d9:14:9c:
         87:d8:80:92:fd:f8:d5:83:f4:03:90:d9:4d:55:e6:16:f5:f1:
         d1:d9:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:06:55 2026 by rpki-client